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f^*) , Abstract. We provide a characterisation of strong bisimilarity in a fragment of CCS that contains only 

£N| ' prefix, parallel composition, synchronisation and a limited form of replication. The characterisation is 

not an axiomatisation, but is instead presented as a rewriting system. 

We discuss how our method allows us to derive a new congruence result in the 7r-calculus: congruence 
' holds in the sub-calculus that does not include restriction nor sum, and features a limited form of 

, replication. We have not formalised the latter result in all details. 

1 Introduction 

o. 

I 1 . We study algebraic properties of strong bisimilarity in a sub-calculus of CCS. Like in previous work pQ, of 

^5 ' which the present study is a continuation, an important aspect of the setting we analyse is the absence of the 

O . sum construct, and, more generally, of any operator that would allow us to decompose parallel composition. 

We present a rewriting system that allows us to characterise strong bisimilarity (~) in a very basic calculus 
that only features prefixes, parallel composition, and replicated prefixes, with the additional constraint that 
these can occur only at top-level. The restriction and choice (or sum) operators are not included. Handling 
replication is the novel aspect w.r.t. pQ, and raises several difficulties when trying to analyse the algebraic 
' properties of ~. 

^v^j ■ Let us focus on the properties of replication w.r.t. strong bisimilarity. In our setting, the most important 

bisimilarity law for replication is written 



\a.P\a.P = la.P , 

and expresses that a replicated process acts as an unbounded number of copies of that process in parallel. 

It appears that we can generalise the above equality, by allowing a replicated process to erase one of its 
copies (we are reading the equality from left to right here) not only at top-level, but arbitrarily deep in a 
5h ' term. In other words, if C is a context (a process with a hole), the law 

\a.P\C[a.P] = \a.P\C[0] 

should hold for strong bisimilarity (the previous equality is obtained by taking C = []). 

This equality, together with the law \a.P\\a.P = \a.P, are the basic ingredients we need in order to 
characterise strong bisimilarity between replicated terms. However, these equations are not enough, as the 
following example shows: process Pi — \a.(b\a.c)\\a.(c\a.b) is bisimilar to Pi = \a.b\\a.c. It seems reasonable 
to consider Pi as the normal form of P\. Intuitively, P\ can be obtained from Pi by inserting a copy of a.b 
"inside" !a.c, and, symmetrically, a copy of a.c inside la.b. A related difficulty appears with equalities like 
\a.(b\a.b) = la.b, where the copy is inserted in the replicated component itself. 

Describing this phenomenon of "mutual replication" in all its generality would lead to complicated equa- 
tional schemata, and we have not been able to come up with a simple, readable, presentation of strong 
bisimilarity based on equational laws. Instead, we introduce a rewriting relation on processes that allows us 
to compute normal forms w.r.t. strong bisimilarity (in particular, we are able to rewrite P\ into Pi). This 
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Fig. 1. Labelled Transition System for our Subset of CCS 



has the advantage of exposing the basic laws that are at work when normalising a process. We show that 
our characterisation of strong bisimilarity still holds when we enrich the calculus with synchronisation. In 
turn, the method we describe can be applied to derive a new congruence result on a subset of the 7r-calculus 
(we must say we have not checked all details of this result yet). 

Outline. We describe the subset of CCS we work with in Sect. [21 in Sect.[3l we introduce a notion of normal 
forms and prove useful some technical results. The rewriting system is defined in Sect. 21 where we show that 
it allows us to reach normal forms. Section is devoted to the extension of our results to a calculus with 
synchronisations, closer to the standard CCS. In Sect.[6l we give concluding remarks, discussing in particular 
how these results lead to a new congruence property in the 7r-calculus. 

2 The Setting 

We work in the subset of CCS defined by the following grammar, where we rely on a countable set of actions 
a, f3,...: 

F ::= | a.F | F\F P,Q ::= F | la.F | P\P (processes) 

D ::= [] | a.D \ D\F C ::= D \ la.D \ C\P (contexts) 

Our calculus features no communication, no restriction, no sum, and allows replication only on prefixes, at 
top-level. We use P, Q to range over processes. A finite process (F) is a process which does not contain an oc- 
currence of the replication operator. For F — a.\.F\ | . . . | ak-Fk, we shall sometime write F as Ilie[i k] a i-Fii 
and denote by IF or IX^i k] ^ a i-Fi the process \a\.F\ | . . . \\ctk-Fk- Note that IF will always denote a process 
having replicated components only. 

We use C to range over single-hole contexts mapping finite processes to processes. Accordingly, we use 
D to range over (single-hole) finite contexts, mapping finite processes to finite processes. Note that the hole 
cannot occur directly under a replication in C . 

The labelled transition system associated to this process calculus is standard (Fig.Q]- note that there is 
no synchronisation rule, this will be addressed in Sect. [5]), and yields a notion of strong bisimilarity, written 
~, which is a congruence. 

We shall rely on the following characterisation of strong bismilarity for finite processes, which is estab- 
lished in pQ: 

Definition 1 (Distribution law) Let = be the smallest congruence generated by the laws of an abelian 
monoid for parallel composition (the neutral element being 0), and the following equation schema, called 
distribution law, where there are as many occurrences of F on both sides of the equation. 

a.(F\a.F\...\a.F) = a.F\a.F\ . . . \a.F , 

It is easy to show that this congruence is decidable, and we have 

Theorem 2 = coincides with strong bisimilarity (~) on finite processes. 
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3 Preliminary Technical Results 



We present some technical results about strong bisimilarity. Most of these help us isolating the replicated 
part from the finite part in processes being compared. Indeed, when characterising strong bisimilarity, we 
shall prove that P ~ Q implies that the replicated parts of P and Q arc bisimilar, and we also need somehow 
to reason about the finite parts of P and Q. 

The following property is necessary to derive correction of the rewrite system we define below. 

Proposition 3 If C[0] ~ \a.F\P, then C[0] - C[a.F]. 

Proof. We show that TZ= {(C[0],C[a.F]) / VC s.t. C[0] ~ \a.F\P for some P} is a strong bisimulation up 
to transitivity and parallel composition (cf. [312] ). 

There are three cases to consider in the bisimulation game: 

— the hole occurs at top-level in the context (C = \\\Q) and the right-hand side process does the following 
transition: C\a.F] F\Q. By hypothesis, Q ~ \a.F\P so that we find Q' such that Q Q' and 
Q' ~ \a.F\F\P. By injecting the latter equality, we obtain Q' ~ Q\F so that Q' closes the diagram. 

— the hole occurs under a replicated prefix in the context (C = 1(3. D\Q) and this prefix is fired: we 

have C[0] A P; = C[0]|D[0] and C[a.F] ^ P r = C[a.F]\D[a.F). This is where we need the up-to 
technique: these processes are not related by 1Z (recall that we work with single-hole contexts). However, 
we can deduce Pi 1Z P c = C[0]|_D[a.F], by considering the context C = C[0]|£)[], and checking that 
C'[0] ~ \a.F\P\D[0]. We finally check that P c and P r are related by the closure of 1Z under parallel 
contexts (by removing the D[a.F] component). 

— in the last case, either the hole occurs under a non- replicated prefix in the contexts (C = (3.D\Q), or the 
contexts triggers a transition that does not involve or duplicate the hole; this case is treated by a simple 
reasoning - just play the bisimulation game. □ 

As a consequence, we obtain the validity of the following laws: 

la.F | C[a.F] ~ la.F | C[0] (A) la.D[a.D[0}] ~ la.D[0] (A') 

Lemma 4 If IF ~ a.F'\Q, then IF ~ \F\a.F'. 

Proof. Purely algebraically: replicate everything and add la.F' in parallel, this yields lF\la.F' ~ la.F'\lQ\la.F' , 
from which we deduce !F|!a.F' ~ la.F'\lQ ~ la.F'\lQ\a.F' ~ lF\a.F'. (Note that, when writing IQ, we ac- 
tually refer to the process obtained by adding replication at top-level on the finite components of Q; we 
easily show that this operation preserves bisimilarity.) □ 

Lemma 5 If F = Yii a i-Fi an d IF ~ la.F'\Q, then there exists j s.t. IF ~ la.F' \ Yii^j l a i-F{ and aj = a. 

Proof. By firing a.F' on the right-hand side, we find j such that aj = a and lF\Fj ~ la.F'\F'\Q, from 
which we deduce \F\Fj ~ IF\F'. Then we show that the singleton relation {(lF,la.F'\Y[i^j laj.Fi)} is a 
bisimulation up to bisimilarity and parallel contexts. 

— when a transition on ai is triggered, with i ^ j, we reason up to parallel composition in order to remove 
the Fi component on both sides; 

— when a transition on aj (or a) is triggered, we have to relate processes lF\Fj and la.F'\F'\ Yii^j l a i-Fi j 
we reason up to bisimilarity in order to rewrite lF\Fj into IF\F' and then up to parallel context in order 
to remove the F' component. □ 

Now we define our notion of normal forms (seeds). 

Definition 6 (Size, seed) The size of P, noted j(P, is the number of prefixes in P. 
A seed of P, noted seed(P) is a process of minimal size such that P ~ seed(P). 
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The seed of a process is defined modulo bisimilarity. We establish in this section that all seeds of a process 
are actually equated by = (Prop. [M]). Note that, because ~ is a congruence in our calculus, if Pi\P 2 is a 
seed, then Pi is a seed. Indeed, if §P[ < OPi and P[ ~ Pi, then -P1I-P2 ~ P{\P2, which contradicts the fact 
that P\\p2 is a seed. 

Notations. 

We shall use S, S' to range over seeds having only replicated components. We write P^ k Q whenever 
there exist ai, .., au and Po, ■•) Pt such that P = Po — ^ Pi . . . -^-> Pt = Q. Note that P— > k u.F for some fc if 
and only if P = P[<xP] for some finite context D. For S = \\ i lai.Si, we write <S#P to denote the fact that 
-i(3i, fc, F^> k cti.Si) 1 i.e., that P does not contain a sub-term of the form ai.Si. On the contrary, we write 
S F when there exists k > such that S— > fe ,S|P, that is, when P is a parallel composition of sub-terms 
of the SiS. In the sequel, we shall use R to range over finite processes satisfying the latter property. 

We can remark that if S#P (rcsp. S — P) and P A P', then S#F' (rcsp. S ~* F'). 

Lemma 7 (i) If S\F is a seed, then S#F; (zi) if S R, then S#P. 

Proof. (i) By contradiction, if F^ k cti.Si, then P = D[ai.Si]. By law (A), S\F - 5|D[0] which contradicts 
the minimality hypothesis about S\F. 
(ii) Again, by contradiction, suppose that R = D[on.Si]. Since, S ~> R, there exist j,D' such that Sj = 
D'[D[aii.Si\], from which we deduce S ~ Ilfc^j ■^■Sk I !aj-P'[P[0]] by (A) (we necessarily have 
i 7^ i). This is contradictory with the fact that S is a seed. □ 

Lemma 8 S 1 ~ S|P and S R entail R = 0. 

Proof. Suppose by contradiction P = a.P'|P". By Lemma [H we have 5 ~ S\a.R' and S ~ S\la.R' by 
replicating all processes. By Lemma [5] there exists i such that 5 ~ la.R'\ Ylk^i a k-Sk- Now, since S R, 
there exist some j,D such that Sj = D[a.R'\; if i = j, we have obtained a smaller seed; otherwise, we use 
(A) to show that !a.P'|!a.,-.P[0]| Y\k=£i j a k-Sk is a smaller seed. □ 

Lemma 9 \Fi\F[ ~ \F 2 \F^ entails IFi ~ !P 2 . 

Proof. Write $ for the seed of \F t , i = 1,2. We have S'i|P 1 / - By emptying P x on the lcftQ, we obtain 

Si ~ S , 2|P ,, 2|P2 for some P"2,P2- Now, by emptying on the right, we get 5i|Pi ~ \S' 2 . Injecting the latter 
equivalence in the one we have previously obtained gives 

Si ~ 5i|Pi|P"2|P 2 • 

If Pi 7^ 0, we can apply Lemma 2] to deduce Si ~ Si|Pi. But this gives a contradiction by Lemma [51 Hence 
Pi ~ 0, which gives us, since we have established Si|Pi ~ S 2 , that Si ~ S 2 . Finally, !Pi ~ !P2. □ 

Lemma 10 If S\F ~ S|P, and S ^ R, then F ~ P. 

Proof. We proceed by induction on the size of P. If P = 0, we have P = by Lemma [8] otherwise, we first 
prove that P and P have the same size: 

- if jjP < UP, by emptying P on the left-hand side, we find R' ^ such that S\R->* F S\R', S ~» R' and 
5 ~ SIP'; this is contradictory with Lemma [8j 

— if OP > IIP, by emptying R on the right-hand side, we find P', F' with < OP' < |P such that 
S\F^ R S\R'\F', S P', 5#P' and 5|P'|P' - S. Then we write P' = a.P |Pi and deduce S\a.F ~ S 
by Lemma 21 then, by firing the a prefix, we find i such that a = a, and S^Po ~ . We check that 
OP) < O-^ 1 so that we can apply the induction hypothesis and deduce that Po ~ Si, whence a.Fo ~ ai.Si, 
and a.Fo = a. Si by Thm. [2j This is contradictory with S'#P (a.Fo is a sub-term of P). 

1 In the present case, 'emptying F[' means playing all prefixes in F[ in the bisimulation game between Si\F{ and 
S2IP2 ~ we shall reuse this terminology in some proofs below. 
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This concludes the proof that F and R have the same size. We then show that the relation {(F, R)}U ~ is 
a bisimulation: 



- when F A F', we find R' such that S|P S|P' and S|F' - S\R'; by induction, F' - R', and we deduce 
that R' is a derivative of R, since otherwise, we would have jjP' > jji? = 1 + jjF' which is impossible. 

— when i? — » i?', either we find F' such that F — > F' and 5|F' ~ S^i?', which allows us to close the 
diagram, by induction; or we find i such that iS|Si|F ~ S\R'. In this case, we empty R' on the right-hand 
side, yielding R" and F' ^ such that S^'IF' - 5; by Lemma H 5|F' - 5, and F' - by induction, 
which is contradictory. □ 

Lemma 11 If S\Fj. ~ S\F 2 and S#Fi (i =1,2), then Fi - F 2 . 

Proof. First observe that if (JFi < [|F 2 , then we can empty Fi by playing challenges on the left hand side, 
and we obtain S ~ S\F 2 with F 2 / 0, which is impossible by Lemma [TU1 Hence j}Fi = j}F 2 . 

Wc then show that K={{F 1 ,F 2 ) / S\F ± ~ S\F 2 } is a bisimulation. If Fi A F{, then 5|Fi A 5|F{, which 
by hypothesis entails that 5|F2 can answer this challenge. By the remark above, S\F 2 necessarily answers 
by firing F 2 , since otherwise we would get equivalent processes with finite parts having different sizes. This 
allows us to show that F 2 can answer the challenge, and that 1Z is a bisimulation. □ 

Lemma 12 S\Ri ~ S|P 2 an-d S Ri (i = 1,2) entail Ri = R 2 . 

Proof. By Lemma ITT1 we have R\ ~ F 2 (S#Ri by Lemma [TJii)). We conclude with Thm. O i?i and P 2 are 
finite processes. □ 

Lemma 13 If S ~ S', then S = S' . 

Proof. Write S = Yl i<m \oti-Si and S' = Ylj <n \ct' 3 -Sj, play each prefix on the left-hand side and apply 
Lemma 1121 to show that there exists a map a : [l..n] — » [l..m], such that ojj.Si = a ' a uyS' !7 uy This map is 
bijective: otherwise we could construct a smaller seed. □ 

Proposition 14 (Uniqueness of seeds) Suppose P ~ P', where P and P' are seeds. Then P = P' . 

Proof. Write P = S\F and P' = S'\F'. As remarked above, S and S' are necessarily seeds because P and P' 
are (hence the notation). By Lemma S ~ 5", whence 5 = 5" by Lemma [TBI Necessarily, 5#F and S"#F', 
which allows us to deduce, using Lemma fTTT that F ~ F' . Finally, P = P' , by Thm.rjl □ 



4 Rewriting Processes to Normal Forms 

Definition 15 (Rewriting, convertibility) Any process P induces a relation between processes, written 
defined by the following axioms, modulo =: 

C[a.F] !a - F|F ' ) c[0] (Bl) \a.F\\a.F\P ^ \a.F\P (B2) 

p p * 

The reflexive transitive closure of — ► is written — ► ; we say that P and Q are convertible, written P ^ Q, 
whenever there exists a process T such that P — > T and Q -^-» T. 

!a./3|0 

Example: we can check that process !a.(/3|a./3) is normalised into \a.j3 via the sequence !a.(/?|a./3) > 

using axiom (Bl). This is the way our rewriting relation proceeds to compute normal forms. In this 
case, an equational reasoning would be possible, as follows: \a.{(3\a.f3) = \{a.f3\a.(3) = \a.fl\la.ft = \a.f3 (we 
use the law (A 1 ) for the first step). 

Lemma 16 If Q -\ T, then Q ~ T. 
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Proof. By induction over the number of rewrite steps. If this number is zero, then this is obvious; suppose 

now Q ^ Q' T. r . 
to rewrite Q into Q': 



now Q —> Q' T. The induction hypothesis gives Q' ~ T. We reason by cases over the axiom that is used 



- (Bl): this means that Q = C[a.P], Q' = C[0] and T = \a.P\P' . From \a.P\P' ~ C[0], we deduce 
\a.P\P' ~ C[a.P] by Prop. G2 hence Q ~ T, 

— (B2): we easily have Q ~ Q', hence Q ~ T. □ 

Lemma 17 Given P, the relation — ► terminates. 

Proof. The size of processes strictly decreases along reductions. □ 

seed C P) 

Lemma 18 For all P, either P = seed(P), or P ^—U P' for some P' s.t. P ~ P' . 

Proof. Write 

P = (Q loi.fi) | P P and seed(P) = ([[ !,. ,.. V,i | P s , 

and set S — Y[j ^- a j-Sj- By definition, P ~ seed(P), which gives, by Lcmma|H 

n ^.fi ~ n ^ . (i) 

i j 

A transition by the left hand side process is answered by the right hand side process, yielding process 
rii ! «i-f» I Fn ~ ! II,!" ,..S, | 5 m , which gives, by injecting equivalence ID, S \ F n ~ 5 | S m . 

By Lemma [TT1 this gives: either (i) F n ~ 5 m , which means by Theorem [5] P n = 5 TO , or (ii) -i(S#F n ) 
(indeed, -i(S , #S , m ) is impossible, since this would allow us to compute a seed having a smaller size than 
seed(P)). In the latter case, (ii), this means that P can be rewritten using axiom (Bl), and the resulting 
process is bisimilar to P. 

Suppose now that we are in case (i) for all possible transitions from the Oj.fiS, that is, for all i, there 
exists j such that o,.fi = ctj-Sj. We observe that the converse (associating a i to all js) also holds, and that 
the number of parallel components in FJ i !ai.Pi is necessarily greater than the number of components in S. 

seed ( P) 

In the case where this number is strictly greater, this means that ► can be used to rewrite the left 

hand side process in ([T]), using axiom (B2). In this case, the resulting process is bisimilar to P. 

We are left with the case where the two processes have the same number of components, which entails 
that they are equated by =. 

To sum up, we have shown that either Y[ t !o,.fj can be rewritten, or Yli !oj-fi = S. In the latter case, 
we can inject equivalence (JlJ in P ~ seed(P), which gives S | F p ~ S | F s . We can apply Lemma [TT] again, 
which gives two possibilities. The first possibility is that F p ~ F s , in which case F p = F s , and finally 
P = seed(P). The second possibility is that ^(S*#P P ) (as above, ^(S#F S ) is not possible since this would 
allow us to compute a seed of smaller size). In that case, we can rewrite P using (Bl), and getting a process 
bisimilar to P. 

seed(P) 

Finally, either P = seed(P), or P can be rewritten using >. □ 

seed(P) * 

Proposition 19 For all P, P > seed(P). 

Proof. Follows by Lemmas [TH] and |T7J □ 
Theorem 20 (Characterisation) P ±=> Q iff P ~ Q. 
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Proof. Suppose P ^ Q. By definition, this gives the existence of T s.t. P T and Q T. We deduce 
P ~ Q by applying Lemma [TBI twice and transitivity of ~. Hence ^ C ~. 

se ed(P) * 

To establish the converse, suppose P ~ Q. Write, using Proposition QJ3 P > seed(P) and 

Q seed ^' ) , seed(Q). By definition, P ~ seed(P) and Q ~ seed(Q), which entails seed(P) ~ seed(Q). This 
gives by Proposition [14] seed (P) = seed(Q), which finally gives P ^ Q. □ 

This result gives a way to decide whether P ~ Q, via Indeed, although Definition [15] does not tell how 
to find process T, that allows one to derive P t» Q, Thm. [20] allows us to reduce this problem to checking 

seed(P) 

whether Q > seed(P). For this, it suffices to look for seed(P) among all processes of size smaller than 



5 Adding Synchronisations 

We can now move to a calculus closer to standard CCS, called mCCS, by instantiating actions with the 
following grammar, where a range over a countable set of names: actions are either input or output prefixes. 

a ::= a | a 

The LTS we obtain with this definition is not that of CCS: we need to add the following rules for synchro- 
nisations, where r is the label for internal moves. 

P ^ P 1 Q^Q 1 P^P' Q-^Q' 

P\Q^P'\Q' P\Q^P'\Q' 

In doing so, we change the notion of strong bisimilarity: the standard CCS bisimilarity, that we shall 
denote using ~, tests internal moves while our notion of bisimilarity (~) plays visible challenges only. 
Therefore, we have ~ C ~. 

The following result says that is actually enough to capture strong bisimilarity on mCCS. As a 
consequence, we do not need to test r transitions to obtain the discriminating power of ~. 

Proposition 21 Let P and Q be two processes. Then P ~ Q if and only if P ^ Q. 

Proof. By Thm. [2D] and the above remark, it suffices to show that C ~. This amounts to check that the 
distribution law and Prop. [3] are valid for ~: we just need to check that silent challenges can be answered in 
the corresponding bisimulation candidates. □ 

Note that the r prefix is not included in this presentation of CCS; indeed, adding r to the syntax of 
actions (a) would a priori break the inclusion ~ C ~: tests performed by ~ on r-transitions would be too 
restrictive, since the only way to answer would be to use a r prefix - synchronisations would not be allowed. 
In the light of Prop. (2lJ we actually believe that r prefixes could be added, that is, that they are played in 
one-to-one correspondence in bisimilarity games. 

We conclude this section by proving that bisimilarity is closed under substitutions in mCCS. We use a to 
range over substitutions, that are functions mapping names to names; we write Per for the process we obtain 
by applying a on all names of P. 

Proposition 22 (~ is closed under substitutions in mCCS) If P ~ Q, then for any a , Per ~ Qa. 

Proof. We show the property for t^. Suppose P ^ Q, which gives the existence of T such that, in particular, 

rp * 

P — ► T. By inspecting the shape of axioms (Bl) and (B2), and reasoning by induction over the number of 
rewrite steps, we can deduce that Per To. Similarly, Qa Ta. Hence Po^Qo. □ 
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6 Concluding Remarks 



6.1 Extending our Characterisation 

In absence of restriction in the calculus, it is easy to see that applying replication to prefixed processes only 
is of no harm in terms of expressiveness, because of the following rather standard structural congruence laws 
for = (which are of course valid strong bisimilarity laws): 

\(P\Q) = \P\\Q UP = IP !0 = 

We have started investigating the question of characterising ~ in the case where replication is not at 
top-level (but where nested replications - that is, replications that occur under replications - are forbidden). 
The law 

a.C\}.a.C[0}] = \a.C[0] 

seems important to capture ~ in this setting. We do not know at the moment whether it is sufficient to 
characterise ~. 

Handling nested replications seems even more challenging. 

6.2 Congruence of Strong Bisimilarity in the 7r-calculus 

Because of the input prefix, congruence of strong bisimilarity requires closure of this relation under substi- 
tutions. In presence of sum, this property fails; as [3] shows, this is also the case as soon as replication and 
restriction are present in the calculus (in absence of sum). 

[1] shows that congruence holds when we renounce to replication, that is, in the sub-calculus that features 
input and output prefixes, parallel composition and restriction. 

Our investigations have convinced us that the same holds if instead we renounce to restriction: we believe 
that the reasoning seen above can be ported to the following subset of the 7r-calculus: 

F ::= | F\F \ a(x).F \ a(b).F P ::= F \ \a(x).F \ P\P 

The analogue of Prop. [22] gives us closure under substitutions of strong bisimilarity, which in turn yields 
congruence. Note that when bisimilarity is closed under substitutions, the ground, early and late versions 
of the equivalence coincide. To adapt our method from mCCS to the 7r-calculus, we work with ground 
bisimilarity. 
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